English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

espanolEsta investigacion tuvo como objetivo disenar una solucion para la toma de decisiones mediante Inteligencia de Negocios, que permite adquirir datos e informacion de una amplia variedad de fuentes y utilizarlos en la toma de decisiones en el analisis de vulnerabilidades de un equipo de respuesta ante incidentes informaticos (CSIRT). Este estudio se ha desarrollado en un CSIRT Academico que agrupa varias universidades miembros del Ecuador. Para llevarlo a cabo se aplico la metodologia de Investigacion-Accion con un enfoque cualitativo, dividido en tres fases: Primera, se realizo una evaluacion comparativa de dos herramientas de analisis de intrusos: Passive Vulnerability Scanner y Snort, que son utilizadas por el CSIRT, para verificar sus bondades y verificar si son excluyentes o complementarias; enseguida se han guardado los logs en tiempo real de los incidentes registrados por dichas herramientas en una base de datos relacional MySQL. Segunda, se aplico la metodologia de Ralph Kimball para el desarrollo de varias rutinas que permitan aplicar el proceso “Extraer, Transformar y Cargar” de los logs no normalizados, que luego serian procesados por una interfaz grafica. Tercera, se construyo una aplicacion de software mediante la metodologia Agil Scrum, que realice un analisis inteligente con los logs obtenidos mediante la herramienta Pentaho BI, con el proposito de generar alertas tempranas como un factor estrategico. Los resultados muestran la funcionalidad de esta solucion que ha generado alertas tempranas y que, en consecuencia, ha incrementado el nivel de seguridad de las universidades miembros del CSIRT academico. EnglishThis study aimed at designing a potential solution through Business Intelligence for acquiring data and information from a wide variety of sources and utilizing them in the decision-making of the vulnerability analysis of an Academic CSIRT (Computer Security Incident Response Team). This study was developed in a CSIRT that gathers a variety of Ecuadorian universities. We applied the Action-Research methodology with a qualitative approach, divided into three phases: First, we qualitatively evaluated two intrusion detection analysis tools (Passive Scanner and Snort) to verify their advantages and their ability to be exclusive or complementary; simultaneously, these tools recorded the real-time logs of the incidents in a MySQL related database. Second, we applied the Ralph Kimball's methodology to develop several routines that allowed applying the "Extract, Transform, and Load" process of the non-normalized logs that were subsequently processed by a graphical user interface. Third, we built a software application using Scrum to connect the obtained logs to the Pentaho BI tool, and thus, generate early alerts as a strategic factor. The results demonstrate the functionality of the designed solution, which generates early alerts, and consequently, increases the security level of the CSIRT members.

Application of business intelligence for analyzing vulnerabilities to increase the security level in an academic CSIRT